[nsd-users] CNAME from another zone

[Matthijs Mekking]

Hi Mohammad,

If you remove the SOA from the zonefile below, you'll probably get an
'RR before SOA skipped' error.

Mohammad H. Al-Shami wrote:
> Thanks Stephane,
> 
> My current configuration is working properly. The thing is I'm trying to understand why this is happening.
> 
> If I remove the SOA record still the same result. If I understood correctly, I can't add a CNAME record for the domain itself, tagiti.com in this case, but I can do www, ftp, ... etc.

That's correct. Because of the SOA record, you can't put a CNAME record
for the domain name of the zone. For every other domain in the zone, you
may add exactly one CNAME record. There may be no other records at that
domain, except DNSSEC related records.

Regards,

Matthijs Mekking
NLnet Labs

> 
> Right?
> 
> Regards,
> Mohammad H. Al-Shami
> 
> On Wednesday 11 March 2009 10:07:14 Stephane Bortzmeyer wrote:
>> On Tue, Mar 10, 2009 at 08:39:40PM +0200,
>>  Mohammad H. Al Shami <mshami at tagorg.com> wrote 
>>  a message of 122 lines which said:
>>
>>> A zone file like the one below won't work.
>> Yes, same error, "CNAME with other data".
>>
>>> @       IN      SOA     ns1.tagidomains.com.    mail.tagidomains.com. (
>>>         2008081100      ;       Serial YYYYMMDDnn
>>>         16384     ;       Refresh
>>>         2048       ;       Retry
>>>         1048576      ;       Expire
>>>         2560)    ;       Minimum
>>>
>>>         3600    IN CNAME        tagorg.com.
>> @ (the current domain name) has both a SOA and a
>> CNAME. Illegal. Either it is an alias (it is the left-hand-side of a
>> CNAME) or it is a real domain with its own data.
>>
>>> It is really annoying to have to edit all of those when we relocate
>>> our sites
>> It has always been illegal. You should have checked your configuration
>> before.
>>
>> http://www.zonecheck.fr/
>>
> 
> _______________________________________________
> nsd-users mailing list
> nsd-users at NLnetLabs.nl
> http://open.nlnetlabs.nl/mailman/listinfo/nsd-users


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 544 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20090311/86b63586/attachment.bin>